Security: remove hardcoded credentials, require DB_PASSWORD, delete .bak file, warn on secrets template

2026-07-17 14:24:48 -05:00
parent 9286f3e323
commit 288767f6c0
4 changed files with 7 additions and 1282 deletions
@@ -18,17 +18,8 @@ export function useAuth() {
  }, []);

  const login = useCallback((username: string, password: string): boolean => {
+    // TODO: Implement server-side authentication via API call
    if (typeof window === 'undefined') return false;
-    if (username === 'admin' && password === 'admin') {
-      localStorage.setItem(ROLE_KEY, 'admin');
-      setRole('admin');
-      return true;
-    }
-    if (username === 'user' && password === 'user') {
-      localStorage.setItem(ROLE_KEY, 'user');
-      setRole('user');
-      return true;
-    }
    return false;
  }, []);